Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa
File:                     3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa (raw, json)
Hash identifier:          1cSm8yiSziKenBRoE8m0bYclp0Sw9XvFXLcPUZpvdRI=
Subject key identifier:   B1:06:A1:8D:CD:56:27:38:90:1F:84:18:D7:78:CE:C9:41:F1:F9:8C
Certificate issuer:       /CN=2F6E3A878A125B74BB292CE5412A523F4B1DCBAF
Certificate serial:       495672D088E1071FA438FACBDC72B9B68D1A3C2A
Authority key identifier: 2F:6E:3A:87:8A:12:5B:74:BB:29:2C:E5:41:2A:52:3F:4B:1D:CB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa
Signing time:             Tue 29 Sep 2026 13:07:25 +0000
ROA not before:           Tue 29 Sep 2026 13:02:25 +0000
ROA not after:            Tue 28 Sep 2027 13:07:25 +0000
asID:                     265408
IP address blocks:        168.195.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.crl
                          rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 12:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:56:72:d0:88:e1:07:1f:a4:38:fa:cb:dc:72:b9:b6:8d:1a:3c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F6E3A878A125B74BB292CE5412A523F4B1DCBAF
        Validity
            Not Before: Sep 29 13:02:25 2026 GMT
            Not After : Sep 28 13:07:25 2027 GMT
        Subject: CN=B106A18DCD562738901F8418D778CEC941F1F98C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:91:ef:a6:f2:fc:b8:bc:e2:4f:ca:cd:26:e2:
                    8f:8c:54:a8:91:0a:04:f6:26:67:83:a6:ad:76:fd:
                    63:44:ef:83:2b:75:b1:e8:ff:0d:76:8e:94:93:a5:
                    8b:10:6e:25:07:5c:ea:46:f4:fd:3f:07:4a:a8:a3:
                    1d:1a:e9:c8:bf:06:d1:96:b8:33:a6:2a:a9:74:ce:
                    a8:d2:28:57:7a:d6:e2:3d:0f:8c:12:79:98:a8:b2:
                    f7:80:fd:c0:87:5b:e0:68:51:c0:db:63:50:0e:c9:
                    8b:d5:ec:e7:9e:9d:33:90:9c:24:cf:af:0b:50:5c:
                    1c:3b:bd:7f:d0:bf:94:e0:a5:cf:67:a8:2f:5c:16:
                    c7:72:5d:66:bc:0c:eb:d9:ae:5d:66:d3:cd:c2:94:
                    a2:12:da:47:4f:ae:22:8d:c2:4c:17:91:d0:48:3d:
                    ce:f7:64:fa:78:c6:c3:a4:eb:f3:9b:e3:9e:74:ae:
                    5a:e3:0d:68:41:b3:a0:c2:19:cd:cd:f1:e8:06:04:
                    a7:a8:26:b3:f5:80:d4:8d:b3:34:20:84:65:a9:d5:
                    a8:99:cc:15:b9:df:a0:5d:7d:3f:7e:57:22:e5:79:
                    02:93:b3:6a:3e:27:92:0a:a6:44:8b:c3:da:7d:53:
                    49:e1:47:1b:1c:ee:13:36:13:dc:0d:b3:c3:cf:ea:
                    a1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:06:A1:8D:CD:56:27:38:90:1F:84:18:D7:78:CE:C9:41:F1:F9:8C
            X509v3 Authority Key Identifier:
                keyid:2F:6E:3A:87:8A:12:5B:74:BB:29:2C:E5:41:2A:52:3F:4B:1D:CB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:71:4d:1b:1a:32:51:71:5a:00:4d:e5:c5:99:3c:c7:f8:f8:
         f9:8d:c8:c6:05:03:88:41:f2:fa:0a:78:c2:55:56:98:3e:5b:
         70:28:8f:a4:79:d0:7d:b2:63:df:9a:a3:82:0a:43:0d:38:61:
         f8:e1:13:42:32:d1:e1:cc:ce:9e:88:c0:62:54:3b:2e:6c:8f:
         ea:ea:9c:f3:08:3a:ba:8a:9d:1c:f9:30:02:5c:b2:2a:3d:af:
         21:21:75:da:b4:4f:60:d7:b4:f2:74:8f:65:d8:37:4c:da:93:
         40:b2:bf:ca:df:72:69:39:99:96:53:b2:a6:e9:8c:e3:0e:f0:
         72:06:84:07:b1:7a:2b:20:3d:34:d0:84:f7:74:ab:45:79:ba:
         76:dc:56:58:95:68:6d:35:07:7f:f2:a9:6d:55:70:f6:c5:3c:
         ba:1d:aa:0a:dc:c8:74:30:d1:e8:b9:e4:28:a6:1b:ae:ef:4a:
         a3:2a:69:65:4f:f9:ed:aa:2b:04:76:7e:01:68:65:34:11:1d:
         49:b9:ea:2c:3f:9b:8f:8e:85:f2:a8:b5:01:b2:4e:4c:cd:99:
         b8:12:cc:83:31:cf:c1:02:74:20:ea:da:e5:ee:83:8b:d6:07:
         7c:e6:dd:df:df:29:d8:a5:aa:d6:65:6a:2f:2b:70:8e:df:f1:
         37:e1:eb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:15:30 2026 by rpki-client